IN THE CLAIMS: 

1. (Currently Amended) A method for integrating a digital signature 
service into a database, said method comprising the steps of: 

5 storing a database comprising a plurality of records: 

receiving a store procedure with dataj from a client of said database , for storage 
in a databas e r e cord ; 

in response to said store procedure. 

receiving a digital certificate for said client; 
10 receiving a private key for said client: 

generating a signature from said dat a, digital certificate and private key 
of said client : 

generating a signature object for said data, said digital signature object 
comprising said data, certificate and signature; and 
15 storing said signature object as at least a portion of a one of said 

records in said database. 

2. (Original) The method as set forth in claim 1, further comprising 
the steps of: 

20 receiving a query command from said user to retrieve said data from said 

record of said database table; 

retrieving, in response to said query command, said data, certificate and 
signature for said user; 
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processing said data and said certificate, using said signature, to verify that 
said data and said certificate are unaltered fi"om their original contents; 

obtaining, from said certificate, an authentication as to the digital signatory; 

and 

generating, as a response to said query command, said data, so as to provide 
verification of said data with said signature and said certificate in response to said 
query. 

3. (Original) The method as set forth in claim 2, further comprising 
the steps of: 

receiving, as said query command, a query command to retrieve at least one 
record in said database comprising criteria based on digital signatures stored for said 
records; 

identifying records in said database with said criteria regarding said digital 
signatures; and 

retrieving said records identified in response to said query command. 

4. (Original) The method as set forth in claim 3, further comprising 
the steps of: 

extracting, from said records retrieved, data, certificate and signature stored in 
said record; 

processing said data and said certificate, using said signature, to verify that 
said data and said certificate are unaltered fi-om their original contents; 
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obtaining, from said certificate, an authentication as to the digital signatory of 
said data; and 

generating, as a response to said query command, said data, so as to provide 
verification of said data with said signature and said certificate in response to said 
5 query. 

5. (Original) The method as set forth in claim 1 , w^herein: 

the step of generating a digital signature for said data comprises the step of 

generating a single signature object comprising said certificate, said document, and said 
10 digital signature; and 

the step of storing said document, certificate and signature as at least a portion 

of a record in said database comprises the step of storing said single signature object in 

said record of said database. 

15 6. (Original) The method as set forth in claim 5, wherein the step of 

generating a single signature object comprises the step of generating a serialized object 
comprising said certificate, said document, and said signature. 

7. (Original) The method as set forth in claim 1, further comprising 
20 the step of storing said certificate of said user in a column of said database table. 
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8. (Original) The method as set forth in claim 7, wherein the step of 
storing said certificate of said user in a column of said database table comprises the 
step of augmenting a user identification field to include said certificate of said user. 



5 9. (Original) The method as set forth in claim 1 , further comprising 

the steps of: 

receiving a second digital certificate for a second client; 

retrieving said signature object fi"om said record in said database as a first 
signature object; 

10 generating a second signature from said first signature object with said second 

client as a signatory; 

generating a second signature object, said second signature object comprising 
said first signature object, said second certificate, and said second signature; and 
storing, in said database, said second signature object. 

15 

10. (Original) The method as set forth in claim 9, further comprising 
the steps of: 

receiving a query command to retrieve said second signature object fi-om said 
record of said database table; 
20 retrieving, in response to said query command, said second signature object for 

said user; 
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processing said first signature object and said second certificate, using said 
second signature, to verify that said first signature object and said second certificate 
are unaltered from their original contents; 

processing said data and said certificate, using said signature, to verify that 
said data and said certificate are unaltered from their original contents; and 

generating, as a response to said query command, said data, so as to provide 
verification of said first and second digital signatures. 



11. (Currently Amended) A computer readable medium comprising a 
plurality of instructions which, when executed by a computer, cause the computer to 
perform the steps of: 

storing a database comprising a plurality of records: 

receiving a store procedure with data^ from a client of said database , for storag e 
in a databas e record ; 

in response to said store procedure. 

receiving a digital certificate for said client; 

receiving a private key for said client: 

generating a signature from said data , digital certificate and private key 
of said client : 

generating a signature object for said data, said digital signature object 
comprising said data, certificate and signature; and 

storing said signature object as at least a portion of a one of said 
records in said database. 
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12. (Original) The computer readable medium as set forth in claim 11, 
further comprising the steps of: 

receiving a query command from said user to retrieve said data from said 
record of said database table; 

retrieving, in response to said query command, said data, certificate and 
signature for said user; 

processing said data and said certificate, using said signature, to verify that 
said data and said certificate are unaltered from their original contents; 

obtaining, from said certificate, an authentication as to the digital signatory; 

and 

generating, as a response to said query command, said data, so as to provide 
verification of said data with said signature and said certificate in response to said 
query. 

13. (Original) The computer readable medium as set forth in claim 12, 
further comprising the steps of: 

receiving, as said query command, a query command to retrieve at least one 
record in said database comprising criteria based on digital signatures stored for said 
records; 

identifying records in said database with said criteria regarding said digital 
signatures; and 
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retrieving said records identified in response to said query command. 

14. (Original) The computer readable medium as set forth in claim 13, 
further comprising the steps of: 

extracting, from said records retrieved, data, certificate and signature stored in 
said record; 

processing said data and said certificate, using said signature, to verify that 
said data and said certificate are unaltered from their original contents; 

obtaining, from said certificate, an authentication as to the digital signatory of 
said data; and 

generating, as a response to said query command, said data, so as to provide 
verification of said data with said signature and said certificate in response to said 
query. 

15. (Original) The computer readable medium as set forth in claim 11, 
wherein: 

the step of generating a digital signature for said data comprises the step of 
generating a single signature object comprising said certificate, said document, and said 
digital signature; and 

the step of storing said document, certificate and signature as at least a portion 
of a record in said database comprises the step of storing said single signature object in 
said record of said database. 
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16. (Original) The computer readable medium as set forth in claim 15, 
wherein the step of generating a single signature object comprises the step of 
generating a serialized object comprising said certificate, said document, and said 
signature. 

5 

17. (Original) The computer readable medium as set forth in claim 11, 
further comprising the step of storing said certificate of said user in a column of said 
database table. 

10 18. (Original) The computer readable medium as set forth in claim 17, 

wherein the step of storing said certificate of said user in a column of said database 
table comprises the step of augmenting a user identification field to include said 
certificate of said user. 

15 19. (Original) The computer readable medium as set forth in claim 1 1 , 

further comprising the steps of: 

receiving a second digital certificate for a second client; 

retrieving said signature object from said record in said database as a first 
signature object; 

20 generating a second signature from said first signature object with said second 

client as a signatory; 
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generating a second signature object, said second signature object comprising 
said first signature object, said second certificate, and said second signature; and 
storing, in said database, said second signature object. 



20. (Original) The computer readable medium as set forth in claim 19, 
ftirther comprising the steps of: 

receiving a query command to retrieve said second signature object fi'om said 
record of said database table; 

retrieving, in response to said query command, said second signature object for 
said user; 

processing said first signature object and said second certificate, using said 
second signature, to verify that said first signature object and said second certificate 
are unaltered from their original contents; 

processing said data and said certificate, using said signature, to verify that 
said data and said certificate are imaltered fi'om their original contents; and 
generating, as a response to said query command, said data, so as to provide 
verification of said first and second digital signatures. 



21 . (Currently Amended) A computer comprising: 

an input device for receiving a digital certificate and a private key for a user of 
said computer; 

database client for generating a store procedure with data for storag e in a 
database record ; 
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database management system, coupled to said database client, for generating, 
in response to said store procedure, a signature from said data, said database 
management system further for generating a signature object for said dat a, digital 
certificate and private key of said database client , said digital signature object 
5 comprising said data, certificate and signature; and 

database, coupled to said database management system, comprising a plurality 
of records for storing said signature object as at least a portion of a record. 
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